Insecure redirect chain

Our sites were recently flagged by Tenable for "insecure redirect chain."

Looking at the redirect chain in devtools, I see https://example.com/redirected-alias -> http://example.com/alias -> https://example.com/alias

Is this normal behavior or am I missing something that would enforce https through the entire redirect chain?